This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft File: v_tlOi9T2WcLP5GEAgnz8seKwbI.mft (raw, json) Hash identifier: +iKk12Synl942lAmkp2+XnvtDAz+Mi5MWrDLtKOELi8= Subject key identifier: 47:64:C8:C5:36:04:8D:89:A9:14:D7:15:D5:7C:DC:81:A5:87:38:7C Authority key identifier: BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2 Certificate issuer: /CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2 Certificate serial: 019AF31C8DEBB7F70051BF59AAA51413139C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:02:06 +0000 Manifest this update: Sat 06 Dec 2025 10:02:06 +0000 Manifest next update: Sun 07 Dec 2025 10:02:06 +0000 Files and hashes: 1: v_tlOi9T2WcLP5GEAgnz8seKwbI.crl (hash: z8Bz9GRgBp2xyJdnxTpLK6RKg6FFrw5sIDr3Ja6qAco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:8d:eb:b7:f7:00:51:bf:59:aa:a5:14:13:13:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2 Validity Not Before: Dec 6 10:02:06 2025 GMT Not After : Dec 7 10:02:06 2025 GMT Subject: CN=4764c8c536048d89a914d715d57cdc81a587387c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:0f:0a:3d:bf:e1:7b:33:8c:36:e1:79:13: 35:03:48:c4:1a:a5:43:eb:04:48:15:17:0f:4e:75: 0e:5c:27:df:ad:10:38:d2:e9:0c:60:09:89:6a:22: ed:20:86:3c:d9:1e:23:a1:82:ca:36:88:8d:b8:64: b6:92:0b:83:21:6c:d6:7c:03:a9:8c:22:de:d5:dc: ca:06:ef:2c:82:47:99:98:d0:6a:0c:e3:88:e0:0f: f9:0c:13:f5:be:8e:6f:23:18:4a:09:eb:60:3e:79: 6a:a0:ca:07:fe:cf:10:ad:42:bf:36:16:88:b1:4d: c1:d7:90:34:17:29:e4:dc:98:ed:ab:64:b1:9a:78: bb:70:c0:d9:6d:55:10:ea:5e:fe:fa:76:d8:b5:e8: 33:1e:f6:dd:21:3d:46:b2:24:f4:23:3c:8d:35:7f: dc:64:6b:5b:27:0d:96:de:38:bd:5d:aa:d5:07:a7: 7a:1c:3c:ee:c4:48:d3:67:44:2f:c7:d7:99:ab:cc: 54:c8:f8:16:15:42:a1:b3:d2:2a:3c:19:5f:5b:73: 38:6a:55:52:93:a5:5f:32:ec:e4:07:0d:92:f7:a0: bc:03:2e:bc:f7:ea:6d:5e:44:24:2b:61:45:3b:ac: 54:35:1c:93:bd:a4:8d:56:19:ac:48:f6:03:07:ba: 4d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:64:C8:C5:36:04:8D:89:A9:14:D7:15:D5:7C:DC:81:A5:87:38:7C X509v3 Authority Key Identifier: keyid:BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:50:5f:e7:38:8a:49:3d:e8:81:7e:10:a4:6b:78:0f:30:dd: a2:13:74:a6:f4:d0:16:5a:f8:4e:86:81:6d:83:8e:49:f2:79: d7:af:6e:ea:08:0c:f7:0a:85:df:aa:5f:38:eb:15:a4:f1:4b: 17:23:db:a0:d5:29:c3:ed:77:1e:b3:51:02:72:67:9f:ce:06: f7:f3:37:b2:38:d8:9a:41:97:9f:1e:92:18:bf:09:32:e6:b6: 57:5b:89:f5:05:76:3a:95:5c:9d:63:c6:c3:1c:5e:65:80:29: 3f:ed:ad:be:81:8e:f7:5a:7b:64:3a:ec:62:56:f3:b3:2e:fb: 91:53:e2:58:7c:f7:1b:10:6d:b0:7b:f8:fc:ea:f6:a5:1f:3b: 97:4a:f0:7a:27:55:db:85:87:70:24:ff:bf:e5:b3:fa:fb:59: 26:34:11:25:53:8a:51:c7:b5:06:49:1c:fd:b7:67:f6:4c:0a: 5c:ba:0b:6f:d0:14:40:d3:0e:46:5b:ad:6d:2a:c8:6d:94:7d: 36:14:95:b6:28:3a:88:2a:0c:db:ea:46:4f:d0:0d:e9:9b:99: c4:05:bc:0e:b0:a1:85:d2:2a:e1:73:4f:f9:3c:d4:82:05:5a: a2:38:6c:4f:37:a4:bc:ec:12:9c:3b:27:35:cc:b8:67:b0:72: 18:f5:bf:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHI3rt/cAUb9ZqqUUExOcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZmI2NTNhMmY1M2Q5NjcwYjNmOTE4NDAyMDlmM2YyYzc4 YWMxYjIwHhcNMjUxMjA2MTAwMjA2WhcNMjUxMjA3MTAwMjA2WjAzMTEwLwYDVQQD Eyg0NzY0YzhjNTM2MDQ4ZDg5YTkxNGQ3MTVkNTdjZGM4MWE1ODczODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubEPCj2/4XszjDbheRM1A0jEGqVD 6wRIFRcPTnUOXCffrRA40ukMYAmJaiLtIIY82R4joYLKNoiNuGS2kguDIWzWfAOp jCLe1dzKBu8sgkeZmNBqDOOI4A/5DBP1vo5vIxhKCetgPnlqoMoH/s8QrUK/NhaI sU3B15A0Fynk3Jjtq2Sxmni7cMDZbVUQ6l7++nbYtegzHvbdIT1GsiT0IzyNNX/c ZGtbJw2W3ji9XarVB6d6HDzuxEjTZ0Qvx9eZq8xUyPgWFUKhs9IqPBlfW3M4alVS k6VfMuzkBw2S96C8Ay689+ptXkQkK2FFO6xUNRyTvaSNVhmsSPYDB7pNkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdkyMU2BI2JqRTXFdV83IGlhzh8MB8GA1UdIwQY MBaAFL/7ZTovU9lnCz+RhAIJ8/LHisGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdl90bE9pOVQyV2NMUDVHRUFnbno4c2VLd2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMDdlMzAtMTc3ZC00YjNmLWI1NjQt YmQyZjhjNmQ1NDk5LzEvdl90bE9pOVQyV2NMUDVHRUFnbno4c2VLd2JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMDdlMzAtMTc3ZC00YjNmLWI1NjQtYmQyZjhjNmQ1NDk5 LzEvdl90bE9pOVQyV2NMUDVHRUFnbno4c2VLd2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlBf5ziK ST3ogX4QpGt4DzDdohN0pvTQFlr4ToaBbYOOSfJ5169u6ggM9wqF36pfOOsVpPFL FyPboNUpw+13HrNRAnJnn84G9/M3sjjYmkGXnx6SGL8JMua2V1uJ9QV2OpVcnWPG wxxeZYApP+2tvoGO91p7ZDrsYlbzsy77kVPiWHz3GxBtsHv4/Or2pR87l0rweidV 24WHcCT/v+Wz+vtZJjQRJVOKUce1Bkkc/bdn9kwKXLoLb9AUQNMORlutbSrIbZR9 NhSVtig6iCoM2+pGT9AN6ZuZxAW8DrChhdIq4XNP+TzUggVaojhsTzekvOwSnDsn Ncy4Z7ByGPW/Eg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:33 2025 by rpki-client